Physical access attacks are no longer edge cases, they are a risk that organizations must actively plan for.
If BitLocker is asking for Recovery Key after Windows Update, and you don't have the BitLocker Recovery Key, see this post ...